patch against SSL man-in-the-middle attack, described in
http://www.kde.org/info/security/advisory-20020818-1.txt (not yet
confirmed on FreeBSD)
Requested by: security-officer
ftp://ftp.kde.org/pub/kde/security_patches/post-2.2.2-kdelibs-kssl.diff
Approved by: will, with these reservations:
Please note, however, that the patch will be untested and
not supported by kde@, similar to the way other people offer
patchsets for older versions of FreeBSD that so@ does not
support. Also note that the patch does not really seem
"official" because it was never applied to their CVS.

Bring in a -real- fix for kdesu. Many thanks to Alan Eldridge and Waldo
Bastian for their work towards fixing this both in 2.2.2/ports and KDE3 CVS.
Bump PORTREVISION to make sure people get *this* fix and not the previous
broken one.

Bring in a few changes to the KDE ports infrastructure, and some fixes. -
Move all stuff specific to kde core ports to x11/kde2/Makefile.kde. +
Default to compile optimized for speed, not debugging, in ports builds,
not just packages. We don't really get that many backtraces or debugging
information, and there's a better way to provide these things to people
willing to spend some time working on KDE. It's at (as announced
before): http://freebsd.kde.org/. - Remove teTeX dependency for kdegraphics2
upon request, and being unable to find any reason not to. Apparently,
kdegraphics still compiles libkdvi and kdvi -- I guess dvips is merely a
runtime dependency. Therefore to enable its use one just needs to add the
teTeX package. Bump PORTREVISION to reflect dependency change. - Fix
koffice port by removing PYTHON_VERSION, which is unnecessary.

Fix error where if '-' is actually used in invoking su(1), we lose all the
environment vars like DISPLAY etc. Bump PORTREVISION. Alan and I still
suspect the problem is somewhere else, but this at least gets kdesu working.
He feels I should back it out, but I'm going to keep it since it's better than
what we had last: a broken kdesu.

Fix a problem with auto{conf,make}: some build magic was introduced to make
sure that the "autoconf" and "automake" binaries KDE looked for were found and
were autoconf213 and automake14 (as there are issues with the latest
versions), but the logic in setting $PATH was wrong. This puts
${WRKSRC}/auto-bin before the rest of the users $PATH. This fixes KDE auto*
problems if automake14 and automake-1.5 are both installed.

Upgrade KDE to 2.2.2: * General: - Support for objprelink.
- Hack for autoconf 2.13/automake 1.4. Note that we can't use the
standard USE_AUTO* because they change things in work/*; KDE has its
own way of doing that. - Light cleanup of extra dirs in the PLISTs
provided by my mkplistpkg[1] script. - Speedups of both
compile and runtime through the usage of --disable-debug and
--enable-final. The latter did not work with the kdemultimedia
package, unfortunately. - Patch updates. * audio/kdemultimedia2:
- Patch to fix KSCD on FreeBSD[2]. It works very well now. *
deskutils/kdepim: - Enable kpilot[3]. Pull in the latest pilot-link
stuff. * devel/kdesdk, * devel/kdevelop: - No specific changes.
* devel/qt-designer: - Make this port depend almost entirely on qt23
to make it more maintainable, so I don't have to keep hacking the
patches to get them to apply. * editors/koffice, *
games/kdegames, * graphics/kdegraphics: - No specific changes. *
misc/kdeaddons: - SDL is required now. Cull SDL PLIST_SUB and such.
- Fix breakage from hardcoding "sdl-config". * misc/kdeutils2:
- Fix problem with klaptopdaemon[4] where it didn't properly
display the battery time. This patch is untested, but applied. *
net/kdenetwork2: - Fix DCC for KSIRC[5]. - Remove ktalkd
from the build. It requires some weird thing in the configure
script that I don't have time to look at. * sysutils/kdeadmin: - No
specific changes. * textproc/kdoc: - Remove bogus requirement that
kdoc requires Perl 5.6.0; it sure seems to operate fine with >=
5.005. But I'll let time tell. * www/quanta: - No specific changes
(--disable-debug support only). * x11/kde2: - No specific changes.
* x11/kdebase2: - Fix ksysguard compile by merging the files from
the HEAD branch of KDE CVS that were missing at release time for
FreeBSD[6]. :\ * x11/kdelibs2: - Recognize CUPS' spinoff[7].
- Add libxslt dependency since it was removed from kdelibs. - Fix
libxml compile problems[8] (accomplished by upgrading). - Remove
libkformula from port Makefile; this library has been spun off into
koffice. - Fix mode problems with DCOP[9]. This allows you to save
files properly. It also seems to be a FreeBSD specific problem.
- Fix bashisms in kdeprint/imagetops script[10]. * x11-clocks/kdetoys2:
- No specific changes. * x11-toolkits/qt23: - Do NOT
upgrade to QT 2.3.2[11]. - Allow devel/qt-designer to depend on this
port entirely for the patches by adding a perlre to accomplish this.
* x11-wm/kdeartwork: - No specific changes.

Fix problem with meinproc coredumping on -CURRENT. Basically what the problem
is is that there are a few sloppy pieces of code in xslt.cpp. Bump
PORTREVISION to account for recent changes (I had intended to do this much
earlier, but wanted to include these patches first, and there was a problem
getting them together correctly).

Reassign MAINTAINER to kde@FreeBSD.org, a group formed specifically to
maintain and improve QT/KDE on FreeBSD. This group (at this time) consists
of: demon, olgeni, kevlo, lauri@kde.org, rwatson, and will.

Upgrade to 2.1.2 (kdelibs only): fix security issues (already fixed in the
port, but now we remove a patch :), remove a lot of obsolete patches. I'm not
sure why I didn't notice that coolo@kde.org fixed the midfile.cc one about six
months ago... ;)

Overhaul QT/KDE support: - bsd.port.mk update to use bsd.kde.mk for
USE_{QT,KDE}* - Cleanup corresponding ports for bsd.kde.mk update. - Fix
bsd.kde.mk: use correct kdelibs dependency, put qt at the bottom, introduce
QT_NONSTANDARD variable for nonstandard configure setup. - Update KDE2 to
2.1.1. Two patches included in x11/kdelibs2 to fix the proxy authentication
that was broken for 2.1.1. Remove old patches. - Potentially fix kdelibs
build for alpha. - Fix qt-designer 2.3.0 build. - Ruby stuff left alone
since it looks like black magic to me. Should still work w/ compat shims
for older USE_QT[,2] style. Some others were also left alone for the same
reason.

Bring in my fixes for KDE2 for users of XFree86 4.0.x. Basically, what this
involves is this: Cull GL from Qt by default, but still provide a Qt+GL
library that may or may not have threads. Then also provide a Qt library that
has threads but not GL. This allows us to make KDE2 depend on a library that
will *not* have threads, ever. Threads will be revisited at a later date.
Ports that require GL support need to be updated to use the hacked library,
libqtgl.so.4. The net result is that we bloat our qt2 package by 1.5-2.5MB
for compatability. Also, static qt will not have GL support.

Lo and behold, welcome KDE 2.1 to our ports tree. As a direct result of the
KDE team's excellent work, I am initiating burn sequence for KDE 1.x. All
base KDE1 ports are hereby nuked. I am also reluctantly reassuming
maintainership of the KDE2 ports. Official KDE 2.1 packages built for FreeBSD
4.2-STABLE w/ XFree86 4.0.2 are available on KDE's official ftp mirrors now.
Enjoy!

Resign as maintainer of KDE2 ports, having brought them up from inception to
the final release of KDE 2.0. Kevin Lo <kevlo@FreeBSD.org> will continue as
the new maintainer. He has commit privileges on the KDE tree, making him an
excellent candidate for this job. I'll be behind the scenes for awhile, since
there are some structural changes I'd like to make but I'd rather have Kevin
do the work. Please, people, direct your patches at Kevin and watch his
"freetime deprivation process" _really_ start. :-P

Take a shot at mentioning what kind of OpenSSL support we have, since KDE2
does not support OpenSSL <= 0.9.4. Also add USE_OPENSSL, to keep people who
don't have it installed from using the port. Perhaps that should be a knob,
in case people have some legitimate reason not to have OpenSSL.

Update to KDE 1.94, the fifth and final beta release of KDE 2.0. If you have
not tried KDE 2.0 or haven't done so in awhile (i.e. since July or before),
you should try this. This version is extremely stable and offers better
functionality than before. This update also introduces the KDE2 modules
kdegraphics and kdemultimedia to our ports tree. Additionally, this marks the
first time FreeBSD packages were announced as part of the KDE2 beta release
announcement! :-)

Update to 20000829A snapshot. Disable kdenetwork2 for the time being so I can
address some of its issues (should see it marked un-broken in about 3 hours,
if they're trivial enough). It took too long to get this update out the
door... :-(

Update to 20000724A (custom-rolled snapshot). Rejoice, because now Konqueror
can load HTML documents, KOffice works semi-well, and KDE2 in general seems
less buggy. Only kdeutils was left out of this mega-update. However, it
should return soon. :-)